Senior Security Architect

Role Overview: As a Senior Security Architect in Information Security at Mobileum, you will be responsible for owning the design, implementation, and continuous improvement of the enterprise security architecture covering on-premises and cloud environments. Your role will be crucial in driving the adoption of secure IT infrastructure and technology, including emerging AI/ML technologies, while ensuring best practices in vulnerability management, secure software development, incident management, and security operations are embedded. Key Responsibilities: - Define, review, and continuously improve the enterprise security architecture strategy to support business agility while addressing evolving threat landscapes and compliance requirements. - Provide expert guidance on the secure design and architecture of IT systems, cloud platforms (public, private, hybrid), and network environments. Lead implementation of security controls aligned with best practices and policies. - Evaluate emerging AI/ML technologies for security risks and suitability. Define security requirements and controls for AI initiatives including model integrity, data privacy, bias mitigation, and ethical considerations. - Recommend, design, and oversee deployment of security technologies across prevention, detection, and response domains such as firewalls, IDS/IPS, endpoint protection, SIEM, DLP, IAM. - Collaborate with security operations and IT teams to embed vulnerability scanning and patch management within architecture processes, ensuring timely risk remediation. - Integrate security principles throughout the software development lifecycle. Guide secure coding, threat modeling, security testing, and code review practices. - Support and enhance the security incident management process by providing architectural insights during incident investigations, helping define mitigation strategies, and improving prevention and detection capabilities. - Work closely with various teams to ensure security architecture is practical, feasible, and aligned with operational requirements. Ability to translate complex technical details into clear, business-understandable language for effective communication with stakeholders. - Lead or support threat modeling and risk assessment activities for critical systems and initiatives. Identify gaps and propose mitigations. - Maintain security architecture repositories including current and target states, gap analyses, standards, and decision logs. Ensure compliance with policies. - Evaluate third-party tools, integrations, and vendor solutions for architectural risks and alignment with security principles. - Stay updated on emerging security threats, vulnerabilities, and regulatory changes. Proactively incorporate insights into architectural improvements. Qualifications: - 7-12 years of progressive experience in information security architecture, including on-premises and cloud environments. - Deep expertise in secure architecture design for complex IT environments, multi-cloud (AWS, Azure, GCP), and hybrid infrastructure. - Strong hands-on knowledge of security technologies supporting prevention, detection, and response. - Familiarity with security frameworks such as NIST, ISO 27001, CIS Controls. - Experience with threat modeling, risk assessment, and mitigation strategies. - Proven experience with vulnerability management, patch management, application security, secure SDLC, and incident management. - Excellent communication, collaboration, and stakeholder management skills. (Note: Preferred certifications and educational background details are omitted from the Job Description for brevity),